Access Control beyond Authentication

Abstract

Nowadays, the Zero Trust model has become one of the standard security models. This paradigm stipulates as mandatory the protection of each endpoint, looking for providing security to all the network. To meet this end, it is necessary to guarantee the integrity of the access control systems. One possibility for bringing security to the different endpoints is continuous authentication, as an access control system. Continuous authentication is the set of technologies capable of determining if a user’s identity remains in time; whether he is the legitimate user (i.e., the only one who should know the secret credentials) or the identity has been impersonated by someone else after the authentication’s process was completed. Continuous authentication does not require the active participation of the user. Aiming to identify the different technologies involved in continuous authentication’s implementations, evaluation methods, and its use cases, this paper presents a systematic review that synthesizes the state of the art. This review is conducted to get a picture about which data sources could allow continuous authentication, in which systems it has been successfully implemented, and which are the most adequate ways to process the data. This review also identifies the defining dimensions of continuous authentication systems.

Deep Learning-Based Managing Disaster with Smart Education in Environmental Sustainability while Avoiding Fake News

“…It provides new access control policies that embrace modern technology, such as protecting scattered and distributed cloud computing resources [28]. It protects information access using continuous authentication to ensure that only authorized users interact with the system [29]. The security paradigm has no trusted network boundary (internal network) and untrusted network boundary (external networks).…”

Transforming the Capabilities of Artificial Intelligence in GCC Financial Sector: A Systematic Literature Review

“…A smartphone or laptop can now be used to access a private company's network or data. The goal is to identify the many technologies involved in the implementations of continuous authentication, as well as the assessment methodologies and application cases [54]. This study attempts to present the recommended ways in the field of financial organization to ensure high security and authenticity, taking into account the varied applications of AI and machine learning techniques.…”